CIPP/A: Certified Information Privacy Professional/AsiaDemo

By IAPP · Question Mode

QuestionQ19

Common Themes

May B-Star lawfully conduct this research using Carl’s medical data?

  • A Yes, because Carl gave his consent for his sensitive personal data to be collected during his employment.
  • B No, an organization is not allowed to use sensitive personal data without an individual's consent unless absolutely necessary.
  • C No, because the research is taking place after Carl has left B-Star's employment.
  • D Yes, if the research is deemed to be in the public interest.
Explanation

Singapore’s PDPA research exception can allow an organisation to use personal data without consent for a research purpose when the statutory conditions are met, including that there is a clear public benefit to using the data, the research requires identifiable data, its results will not be used to make a decision affecting the individual, and published results do not identify the individual. A former employee’s departure does not itself bar the exception, while consent to collect employment-related data does not by itself authorise a different research use.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!